Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: P5jLK363s88c4C17CfiL4uLLfywBiplh3oM3wcm8fuA=
Subject key identifier: 87:E9:A5:92:A0:94:2B:7E:7E:2D:30:8A:DE:88:28:2A:0F:3C:9E:61
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 019FAABE299285E5D106CBD64B92EA84BF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 22:00:16 +0000
Manifest this update: Tue 28 Jul 2026 22:00:16 +0000
Manifest next update: Wed 29 Jul 2026 22:00:16 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: H9RE5hOZT9k8KUujGUHqLGp480CcxCZalxZ09wqE3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:29:92:85:e5:d1:06:cb:d6:4b:92:ea:84:bf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Jul 28 22:00:16 2026 GMT
Not After : Jul 29 22:00:16 2026 GMT
Subject: CN=87e9a592a0942b7e7e2d308ade88282a0f3c9e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:3b:1c:5d:3f:33:08:a0:32:2e:52:c1:2d:
fd:13:34:1c:25:16:37:2d:f7:d6:22:84:23:79:29:
e7:84:88:cb:14:26:22:02:2f:03:24:6c:09:39:49:
5a:61:9d:9c:bf:ca:d2:e3:7e:33:65:ef:d0:94:90:
a2:08:2c:f6:02:a0:32:bd:5a:d9:6d:7f:0b:3a:33:
c3:49:c0:c0:d4:50:19:d0:1c:86:30:ef:26:1b:67:
00:64:5d:f6:14:9f:dc:d0:d2:1d:26:81:d4:1d:ad:
55:c0:49:ac:6d:c6:0d:6b:96:bc:88:5c:c9:f4:7f:
78:e6:b2:9a:fc:df:2f:14:42:71:34:2a:cc:77:c5:
3b:75:80:7a:47:ff:1f:70:fe:5a:63:e4:fa:68:ed:
c9:89:cb:35:55:51:21:8c:ed:6f:01:1b:98:79:df:
e3:22:6c:7b:27:3a:20:07:e1:73:84:9d:ea:59:66:
cd:43:db:10:94:3b:e4:da:f9:4d:ae:e3:c1:6f:ee:
eb:73:04:3b:b2:f6:7a:49:5e:06:f4:0c:4b:51:95:
8b:b0:7e:1b:dc:5e:42:ce:63:e3:b9:aa:62:18:32:
00:13:21:63:14:78:0a:e8:cc:5e:d8:d3:03:65:37:
93:f4:68:2c:f9:92:dd:ae:68:46:91:88:a0:26:56:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E9:A5:92:A0:94:2B:7E:7E:2D:30:8A:DE:88:28:2A:0F:3C:9E:61
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:14:d4:1b:90:5a:9e:ff:15:12:de:c2:d3:b5:3c:51:bc:16:
b4:fc:79:bc:ad:e0:a5:3f:dd:7d:f4:a5:d9:7f:a8:50:82:a2:
bc:a3:b3:b2:22:75:7e:98:73:9b:0a:47:ae:e5:df:77:77:1b:
7a:9b:68:37:86:29:27:c9:b7:54:4a:23:79:63:64:a8:21:77:
c4:3a:b2:d7:d5:69:df:1b:66:cc:cb:dd:4a:95:ab:88:84:7d:
a3:ac:45:c0:0c:29:37:bb:94:5b:c9:a8:d6:ce:56:0e:ab:32:
a9:af:7b:ef:4b:de:ea:90:09:34:90:bf:04:0e:fc:a5:41:7d:
6e:e3:e8:25:c0:45:3c:ef:be:bf:b4:ed:88:61:c1:1e:9d:fe:
c1:ae:48:96:da:89:d1:a9:6d:4d:f6:d3:b7:ec:78:58:c0:b1:
b5:48:9b:84:ae:ad:f5:0a:d1:a3:7f:3c:8b:ce:a4:58:fc:1d:
2d:d2:04:63:63:d0:16:33:05:62:38:77:0e:e5:a8:bc:a4:30:
4d:b0:3d:00:c9:07:6d:8b:ee:dd:69:f8:63:42:4b:9d:e9:ac:
56:00:ae:f7:cd:10:39:57:18:d1:9c:26:1b:46:93:7d:a1:e4:
42:27:4b:43:3a:6d:3d:86:86:80:16:aa:9a:92:7c:5e:75:84:
00:54:7d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:32:06 2026 by rpki-client